creating robots.txt

A robots.txt is just a file you can create with any text editor, it will only advise a search engine what to index and what not (note that not all crawlers will listen to your set guidelines). It's not a security measure to prevent someone from accessing a url in your project. A .htaccess file can limit that if you will.